STIGQter STIGQter: STIG Summary: Red Hat Ansible Automation Controller Application Server Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 05 Jan 2026:

Automation Controller must limit the number of concurrent sessions to an organization-defined number for all accounts and/or account types.

DISA Rule

SV-256896r960735_rule

Vulnerability Number

V-256896

Group Title

SRG-APP-000001-AS-000001

Rule Version

APAS-AT-000010

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

As a System Administrator for each Automation Controller host, navigate to the Automation Controller web administrator console:
Settings >> System >> Miscellaneous Authentication settings.

Click "Edit".

Change "Maximum Number of simultaneous logged in sessions" to match the organizationally defined maximum or greater than 0.

Click "Save".

Check Contents

As a System Administrator for each Automation Controller host, navigate to the Automation Controller web administrator console:
Settings >> System >> Miscellaneous Authentication settings.

Verify the "Maximum Number of simultaneous logged in sessions" field is set according to policy.

If this configuration setting does not match the organizationally defined maximum, or is set to -1 (negative one), this is a finding.

Vulnerability Number

V-256896

Documentable

False

Rule Version

APAS-AT-000010

Severity Override Guidance

As a System Administrator for each Automation Controller host, navigate to the Automation Controller web administrator console:
Settings >> System >> Miscellaneous Authentication settings.

Verify the "Maximum Number of simultaneous logged in sessions" field is set according to policy.

If this configuration setting does not match the organizationally defined maximum, or is set to -1 (negative one), this is a finding.

Check Content Reference

M

Target Key

5534